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DESCRIPTION 
TCET Bs^ander 



1. BACKGROUND OF THE INVENTION 
1.1. FIELD OF THE INVENTION 



The present invention relates to the field of embedded 
processing systems and electronic control units (ECUs) and to 
autonomic embedded confuting solutions in particular for 
telematic applications implemented in vehicles on road. 

1.2 . DESCRIPTION AND DISADVANTAGES OF PRIOR ART 

The present invention may be applied in a variety of technical 
environments including industrial control omits, e.g. 
machinery tool control, manufacturing-line control units, 
automotive ECUs, multimedia units, telematic units, home 
appliance electronic control units, commercial and industrial 
•diagnostics equipment tools, as well as in autonomic -embedded- 
computing solutions for vehicles on road, track, in the air, 
on/under water for security relevant systems and for safety 
relevant systems. 



In the field of embedded processing systems and ECUs 
generally, a variety of functions are performed in a computer- 
assisted way. Very often, this means to apply a dedicated 
single- or multiprocessor unit to achieve one particular 
function. This is very often accompanied by applying quite 
specialised expensive components which are produced very 
specifically and in small series just to perform a single 
application function. This is repeated for a plurality of 
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different application functions, which results in enormous 
aggregation of high cost ECUs, which work side by side, 
sometimes connected via a common bus system. 

The same is true for the be fore -mentioned embedded- computing 
solutions for vehicles for example on road. As this is a 
particular focus of the present invention, prior art will be 
discussed in closer relationship. the3;Leto . 

In automotive applications the security requirements are 
basically quite high in order to avoid breakdown of components 
as this may result in risking critical situations. Thus, quite 
expensive, highly reliable components and sxibsystems are often 
used redundantly which share a common bus system, for example 
a CAN-bus. Typically, a prior art embedded system may be 
sketched out as follows: an embedded processing system 
covering a plurality of technical applications, the operative 
functions of which are performed with a respective plurality 
of application-specific Electronic Control Units (ECU) , 
whereby an ECU comprises a micro-controller and/or one or more 
processors, and specific input/output (I/O) subsystems. 

This situation is schematically shown in fig. 1. Three ECUs A, 
B, C are depicted, of which each ECU performs an own 
application function. ECU A may be considered to be dedicated 
for heating and cooling the car, ECU B for controlling a 
built-in mobile phone and ECU C for controlling open and 
closing of the windows. As one can see, each ECU comprises a 
specialised application-specific input/output subsystem 3 and 
one or more processors or micro-controllers 4. They differ 
from A, B and C very distinctly because the I/O subsystems are 
specific for controlling temperature, controlling the mobile 
phone and controlling the opening and closing of windows. 
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In the automotive sector such embedded systems are 
increasingly used. In many cars, the value of them is in the 
range of 20 to 30% of the total car value. Under the general 
constraint to provide improvements to the purchaser of a car 
giving more safety, security or luxury the car manufacturers 
must basically build in more redundancy in order to avoid that 
an eventual breakdown of a_part of an. ECU causes problems. 
Increased redundancy of electronic circuits, however, results 
in an increase of costs because expensive systems are used, 
which must be duplicated on system- and subsystem level. 
Further, a general cost-increasing problem is that a car 
manufacturer buys one ECU from a first supplier, and the next 
ECU from a different supplier and is thus very dependent of 
specific suppliers and on their proprietary solutions, 
systems, subsystems and components. 

One solution to this would be the unrealistic approach to 
demand from a ECU-supplier also to fabricate ECUs for 
applications which are not inside his competence. Of course, 
this way is not feasible. 

1.3. OBJECTIVES OF THE INVENTION 

It is thus an objective of the present invention to provide 
improved embedded processing systems which have an increased 
level of security, performance, while the costs are not 
increased, but more or less decreased. 

2« SUMMARY AND ADVANTAGES OF THE INVENTION 

This Objective of the invention is achieved by the features 
stated in enclosed independent claims. Further advantageous 
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arrangements and embodiments of the invention are set forth in 
the respective subclaims. Reference should now be made to the 
appended claims. 

According to its broadest aspect an embedded system knovm from 
prior art is modified significantly. The inventive system is 
characterized by having a plurality of extracted interfaces - 
hereafter called interface>.expander Qpntrollers (digital I/O 
generation and capture, analog I/O, bus-systems controllers) 
comprising each a respective one of said application-specific 
I/O subsystems and one or more standard processor units having 
only a standard I/O- interface connecting to an extracted 
interface chip. 

Thus, the present invention proposes to remove or extract the 
application-specific support functions and respective I/O 
siabsystems from the main processors or controllers of the 
system, to include said extracted circuits into a single ASIC 
chip or respective number of ASIC chips or the like, and to 
connect them preferably via a supervising General Controller 
Unit (12) to a plurality of standard and low-price processors 
(40), which have the task to supply the ASIC and the multiple 
functions thereof with enough computing power. By that, a 
remarkably cheaper embedded system is obtained due to the fact 
that the computing power is provided by a plurality of cheap, 
standard processors . 

Further, the system may further have mapping means and a 
General Controller Unit operatively coupled thereto for 
dynamically switching a (low-price standard) processor 40, or 
a plurality of them to a selected extracted interface chip 
under consideration of processor timing requirements. This 
enables for more flexibility and better efficiency of 
processors due to dynamic switching, which is advantageous for 
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instance for a situation in which a processor has a breakdown 
period. 

Further, according to a further aspect of the present 
invention, the before-mentioned approach is implemented in a 
3 -layer architecture having: 

a primary layer comprising basic configuration layout data and 
standard interface means f^r conpectijig to said plurality of 
standard processors specifying static interface settings for 
said plurality of standard processor units, and 
a secondary layer comprising an "autonomic -state" switchboard 
matrix means, an emergency switchboard matrix means and a port 
interface means connecting to said plurality of application- 
specific I/O subsystems. In addition to the above mentioned 
basic concept this enables for a clearly structured 
architecture of the total embedded system, and also provides 
for a reliable emergency processing in case one of said 
processors has a break down. 

When an additional autonomous controller implements a 
monitoring function e.g., an individually programmable 
Watchdog, monitoring the operational status of said plurality 
of standard processing units, and said monitoring function is 
operatively coupled to said General Controller Unit (12) and 
the mapping means, then the system reliability and safety is 
further enhanced, as the monitoring function is not dependent 
of the rest of the (standard) processors. 

When further, a database is provided storing instructions how 
to handle specific breakdown cases, i.e., collecting a 
plurality of different error state conditions of the plurality 
of subsystems and processors mapped thereto, then a 
predetermined, free configurable emergency task distribution 
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is established saying which processor supplies which 
application. Thus, the application specific chips ASICs can be 
prioritized, and further, a priority rule can be made 
dependent and dynamically varying in dependence of the current 
operational state of the car. Thus, operation states e.g., 
driving with a speed of 

150 km/h may be set in contrast to an operational state, of 
speed = 0 km/h, or a closed, parking j::ar , without any person 
sitting inside. 

The extracted application-specific logic means may 
advantageously implemented as in ASIC form. 

Further, advantageously, a further, separate emergency 
controller, e.g., a separate ASIC chip or added to the single 
or multiple I/O ASIC chip solution, may be provided 
continuously stbring the current GPS coordinates after reading 
it from an interface to a built-in navigation system. Said 
emergency controller is dedicated to send an emergency signal 
including said coordinates and possibly further individually 
'programmable text information - for example specifying the 
blood type { A, B, AB including Rhesus factor) of the driver 
and accompanying persons, in form of an SMS - message (Short 
message Service) , in case one or more external sensor devices 
detect an emergency case in form of an accident. In this 
variation the power supply for the emergency controller 
preferably includes a condenser device instead of or in 
conjunction with a battery, in order to guarantee that the 
message may be sent out even in a case in which the car's main 
power supply does not work anymore. 

Finally, the inventional concept is an improvement of elevated 
value for the particular IBM "TCET" architecture, a computer 
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system architecture for distributed systems using a loosely 
coupled multiprocessing. 

3. BRIEF DESCRIPTION OF THE DRAWINGS 

The present invention is illustrated by way of example and is 
not limited by the shape of the figures of the drawings in 
which: 

Fig. 1 is a schematic block diagram representation 

illustrating the basic structural components of an 
embedded system in prior art; 

Fig. 2 ,3 is a schematic block diagram representation 

illustrating the basic structural components of an 
embedded system according to a basic (Fig. 2) and 
preferred aspect (Fig. 3) of the present invention; 



Fig. 4 is a schematic block diagram representation 

> illustrating the basic structural components of an 
embedded system according to the preferred layer 
concept of the present invention; and 

Fig. 5 is a schematic block diagram representation 

illustrating the basic structural components of an 
embedded system according to Pig. 4 showing some 
more details; 



DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 



With general reference to the figures and with special 
reference now to fig* 2 the basic idea of the present 
invention is illustrated in a quite abstract manner in order 
to increase clarity. The abstract core of the present 
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invention comprises the idea of extracting the application- 
specific I/O subsystem from the rest of the ECU, consisting 
essentially of the processor part. Thus, in an illustrative 
example, in which an embedded system comprises a plurality of 
five ( A to E) ECUS, for each ECU a specialised, application- 
specific interface chip 30 A, 30 B, 30 E is provided which 
are basically all connected to standard- like, unspecialised, 
possibly simple-structyred^and. cheap j>rocessors 40. 

Thus, each of the distinct ECUs A, B, C have specific I/O 
subsystems and are preferably operated with the same type of 
processor. Of course, a larger number of processors can be 
used without increasing the price of the total system, as such 
processors 40 may be produced in large series. Each CPU 40 
preferably comprises standard input /output ports, and standard 
register and interrupt ports. Each of said specific I/O 
subsystems, however, is further produced in a smaller series 
which basically does not contribute to cheaper prices, due to 
the fact, however that the extracted, application-specific I/O 
subsystems require significantly reduced silicon chip area, 
as, for example, a CAN-controller needs about 3000 gates only, 
a serial I/O for connecting to a modem device needs about 2000 
gates only. Thus, a considerable decrease of chip area can be 
achieved for the application-specific subsystems 30 A, 30 E. 

Even when adding a CPU to such invent ional ECU, in order to 
increase security by redundancy this does not increase the 
overall costs significantly. Increased redundancy ECUs are 
depicted at the left and right margin in fig. 2. The 
association between an application-specific extracted circuit 
30 and a standard processor 40 is fixed in this primary 
aspect . 
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A further advantageous aspect of the present invention is 
illustrated in fig. 3: 

A general controller unit 12 is provided operatively coupled 
with a mapping means 26 in order to be able to obtain a 
possibly varying association between each of said application- 
specific subsystems 30 A, ... 30 E and the standard processors 
40. For example, in case oj one of said processors 40 has a 
breakdown and is not active anymore, the controller unit 12 
may control the mapping means electronic circuit (26) to 
disconnect the breakdown processor from the respective I/O 
subsystem and to connect the latter one to a different CPU 
which is going fine. 

This dynamic mapping between standard processors and a 
respective-specific I/O subsystem will be further enhanced and 
described in more detail amongst other advantageous 
inventional features in the following figures : 

In fig. 4 a preferred embodiment of the present invention is 
described with varying aspects from figure to figure, which 
might be used in the telematics field in order to improve the 
plurality of embedded systems in a car. The general aspect 
thereof is basically coincident with the approach given in 
fig. 3. It should be noted, however, that in figures 4 to 8 
the standard processor units are depicted at a respective top- 
portion in the figures, whereas in figures 1 to 3 the 
processors are depicted in the respective bottom portion. 

The preferred embodiment discloses a three- layer structure, a 
primary layer 50 basically comprising the primary port 
interfaces to connect to the above-mentioned standard 
processors 1 to n, denoted with reference sign 40, above. 
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connecting to further general purpose input/output circuitry, 
to a micro-controller bus and for example to a PCI -bus -system. 
The primary layer 50 is basically intended to comprise static 
configuration data for the connected processor systems and 
subsystems. The general purpose I/O systems are utilized as a 
generic fill-in and complementing I/O systems to imitate 
standard micro-Controller busses and respective memory 
interfaces . 

Further, a secondary layer 60 is provided according to this 
embodiment, which basically comprises dynamically re- 
configurable parameter settings for the standard, application- 
specific input/output subsystems as is for example CAN-B, CAN- 
C, or standard I/O subsystems SIO-1 to SlO-n, or a general 
. purpose I/O subsystem. 

Further, a broker and arbitration layer 7 0 is provided 
cooperating with a General Controller 12, which basically is 
corresponding to component 26 and 12 in fig. 3, respectively. 
Thus, a mapping as illustrated in fig. 3 . may also take place 
in the system depicted in fig. 4. 

With further reference to fig. 5 further preferred features of 
the basic embodiment depicted in fig. 4 are further 
illustrated in more detail. Again, the primary layer 50 is 
depicted in the top-portion of the figure. In particular, the 
general controller unit 12 is equipped with an additional 
controller 80 implementing a monitoring function, for example 
in form of individually programmed watchdog functions 90, 100 
for both, the primary port interfaces and the secondary port 
interfaces 100. In Fig. 5 the monitored points 90, 100 are 
depicted with an encircled '*M" (''Monitor"). 
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All logic detailed in fig. 5 or fig. 4 may be advantageously 
provided in form of a programmable ASIC, or a static ASIC. 

The primary layer 50 further comprises in particular a logic 
52, which implements the external CPU or micro-controller 
interface. It has a set of registers 82 accessible by 
controller unit 12, which stores all necessary port definition 
parameters . 

Further, the basic system layout is stored in a configuration 
section 54, which stores the so-called ^static system 
parameters" for all processors connected to the ASIC. Those 
autonomic state parameters comprise any static, ie, "normal 
case" boot or re-boot information for the embedded system and 
are stored in a set of registers 84. Further, the broker layer 
and arbitration logic 70 stores some priority parameter 85 in 
respective input registers. Those priority parameters define 
which of the subsystems of the secondary layer 60 are to be 
supplied with CPU processing power according to a given 
priority rule, which prefers the most important subsystems 
'first. Thus, in case one or more of said processor units fail, 
such priority rules define an emergency operation, which 
enables the most important application functions to continue. 

Further, said secondary layer 60 comprises preferably an 
autonomic control switchboard matrix 62 having associated a 
set of autonomic state parameter registers 86, further an 
autonomic emergency control switchboard 64, having an 
autonomic emergency parameter set 87, which provides for 
emergency boot or re-boot capability, and a physical 
interface logic 66 having respective input registers 88 which 
provides for the physical access to the actual application- 
specific I/O systems (CAN-bus, mobile phone and other I/O 
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equipment in the above-mentioned example) . 

All of the above-mentioned parameter registers 82, 84, 85, 86, 
87 and 88 are accessible by said general controller unit 12. 
Preferably, said controller unit 12 comprises an own processor 
80 acting independently of the plurality of processors 40 
mentioned above. Further, according to a preferred aspect of 
the present invention the general pu23)ose controller 12 may 
access a built-in "database", which stores instructions, how 
to handle specific breakdown cases of error state cases 
associated with either of said standard processors. For 
example, when some of the watchdogs monitoring the processors 
report an error status of the associated processor, the 
general controller xonit will perform a lookup in the error 
case database and selects the pre-programmed instruction, how 
to handle this specific error case, in practice, when for 
example the processor associated with closing and opening the 
windows has a breakdown, then the general controller unit 12 
may decide due to said lookup that the processor associated 
basically with managing audio/video subsystems may be 
•exceptionally used for closing the windows. This dynamically 
performed switching from one processor to the other processor 
is performed via the autonomic control switchboard matrix 62, 
which is basically a multiplexer controlled by unit 12. It 
should be landerstood that functions other than the above 
mentioned exainples may also be controlled by the inventional 
feature of dynamic switching. 

Further, preferably one or more internal controllers 110, 112 
may be advantageously provided in order to provide processing 
power for major emergency cases in which a significant number 
of standard processors are in error state. These additional 
controllers are then occupied to reboot the system if 
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required, with strongly modifies emergency parameter sets, 
thus to perform a "reverse" boot or emergency boot process 
targeted to supply processing power only to the most important 
subsystems. This is again switched via said multiplexer unit 
62 in co-operation with the general controller unit 12. 

The present invention can be realized in hardware, software, 
or a combination of hardware and. software . A tool according to 
the present invention can be realized in a centralized fashion 
in one computer system, or in a distributed fashion where 
different elements are spread across several interconnected 
coinputer systems. Any kind of computer system or other 
apparatus adapted for carrying out the methods described 
herein is suited. A typical combination of hardware and 
software could be a general purpose computer system with a 
computer program that, when being loaded and executed, 
controls the computer system such that it carries out the 
methods described herein. 

The present invention can also be embedded in a computer 
program product, which comprises all the features enabling the 
implementation of the methods described herein, and which 
when loaded in a computer system - is able to carry out these 
methods . 



Computer program means or computer program in the present 
context mean any expression, in any language, code or 
notation, of a set of instructions intended to cause a system 
having an information processing capability to perform a 
particular function either directly or after either or both of 
the following 

a) conversion to another language, code or notation; 

b) reproduction in a different material form. 



